Skip to content

chore: bump github.com/vektah/gqlparser/v2 from 2.5.58 to 2.5.62 - #77

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/vektah/gqlparser/v2-2.5.62
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/vektah/gqlparser/v2-2.5.62

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 16, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/vektah/gqlparser/v2 from 2.5.58 to 2.5.62.

Release notes

Sourced from github.com/vektah/gqlparser/v2's releases.

v2.5.62

Changelog

  • 4354676b377d1c6f4fdf4b83ee77986e0dc22555 gqlerror: merge an error tree's slog attributes (#492)
  • ca12c04f022bfeea47c7ffa9b736d2dab1f35cef validator: reject duplicate argument definitions (#491)

Verifying this release

# 1. cosign signature over the checksum file (identity = the release workflow).
cosign verify-blob \
  --bundle checksums.txt.sigstore.json \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity 'https://github.com/StevenACoffman/gqlparser/.github/workflows/release.yml@refs/tags/v2.5.62' \
  checksums.txt
2. source tarball + SBOM hash to the now-trusted checksums.
shasum -a 256 -c checksums.txt
3. GitHub build provenance.
gh attestation verify gqlparser_2.5.62_source.tar.gz --repo StevenACoffman/gqlparser

The SBOM is gqlparser_2.5.62_source.tar.gz.sbom.json (SPDX-2.3).


Released by GoReleaser.

v2.5.61

Changelog

  • 9dfb5891deec5fda3a9c26ede5c3c777471b6e50 Clarify LICENSE file
  • a3e84dbfc63e622205352e86a6dfcd4168df6e5a Update the stuff (#490)
  • 1762d4d4ed1db5fefbf50e1af5e95dbaa51031e8 build(deps): bump anchore/sbom-action/download-syft (#488)
  • 97768b1013a8a3fa7a79fd36d48424afc3b4ab6a build(deps): bump chai in /validator/imported in the actions-deps group (#487)
  • 54938d253c9b3696e6ca8d9b1238ec535ae18a9a gqlerror: report an error's own fields as slog attributes (#489)

Verifying this release

# 1. cosign signature over the checksum file (identity = the release workflow).
cosign verify-blob \
  --bundle checksums.txt.sigstore.json \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity 'https://github.com/StevenACoffman/gqlparser/.github/workflows/release.yml@refs/tags/v2.5.61' \
  checksums.txt
2. source tarball + SBOM hash to the now-trusted checksums.
shasum -a 256 -c checksums.txt
3. GitHub build provenance.
gh attestation verify gqlparser_2.5.61_source.tar.gz --repo StevenACoffman/gqlparser
</tr></table>

... (truncated)

Commits
  • ca12c04 validator: reject duplicate argument definitions (#491)
  • 4354676 gqlerror: merge an error tree's slog attributes (#492)
  • a3e84db Update the stuff (#490)
  • 9dfb589 Clarify LICENSE file
  • 97768b1 build(deps): bump chai in /validator/imported in the actions-deps group (#487)
  • 1762d4d build(deps): bump anchore/sbom-action/download-syft (#488)
  • 54938d2 gqlerror: report an error's own fields as slog attributes (#489)
  • 4e17d6e ast: cover the quoting cases mutants slipped through (#485)
  • 1abdeea ast: quote string values as GraphQL, not Go (#483)
  • cea8f64 formatter: escape """ inside descriptions (#484)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/vektah/gqlparser/v2](https://github.com/vektah/gqlparser) from 2.5.58 to 2.5.62.
- [Release notes](https://github.com/vektah/gqlparser/releases)
- [Commits](vektah/gqlparser@v2.5.58...v2.5.62)

---
updated-dependencies:
- dependency-name: github.com/vektah/gqlparser/v2
  dependency-version: 2.5.62
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 16, 2026
@coderabbitai

coderabbitai Bot commented Oct 16, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: QUIET
  • Plan: Advanced
  • Run ID: 80d01cef-18d2-402e-b24b-5463c7404a69

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Development

Successfully merging this pull request may close these issues.

0 participants